Link to home
Start Free TrialLog in
Avatar of red_75116
red_75116Flag for United States of America

asked on

Replication failures

Trying to replicate a 2000 DC to a 2008R2 DC so I can remove the 2000 DC from the domain.  The 2000 DC ran out of hard drive space and began having multiple issues and we began the process to upgrade it.

I have looked at countless artilcles, but I am struck.  Running DNS on the new 2008R2 machine and both DCs point to that.  Both DC's think the own the naming master, but all the other FSMO roles are with the 2000 server.

when I run DCDIAG /fix  I get this.

I;m to the point where I will force remove the 2000, but dont know how to get the FSMO roles over

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\UFNTS8
      Starting test: Connectivity
         ......................... UFNTS8 passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\UFNTS8
      Starting test: Replications
         [Replications Check,UFNTS8] A recent replication attempt failed:
            From SR8 to UFNTS8
            Naming Context: CN=Schema,CN=Configuration,DC=lapointweb,DC=com
            The replication generated an error (1908):
            Could not find the domain controller for this domain.
            The failure occurred at 2013-10-12 09:48.45.
            The last success occurred at 2013-09-12 15:48.37.
            848 failures have occurred since the last success.
            Kerberos Error.
            A KDC was not found to authenticate the call.
            Check that sufficient domain controllers are available.
         [SR8] DsBind() failed with error 1398,
         There is a time difference between the client and server..
         [Replications Check,UFNTS8] A recent replication attempt failed:
            From SR8 to UFNTS8
            Naming Context: CN=Configuration,DC=lapointweb,DC=com
            The replication generated an error (1908):
            Could not find the domain controller for this domain.
            The failure occurred at 2013-10-12 09:48.45.
            The last success occurred at 2013-09-12 16:04.46.
            2946 failures have occurred since the last success.
            Kerberos Error.
            A KDC was not found to authenticate the call.
            Check that sufficient domain controllers are available.
         [Replications Check,UFNTS8] A recent replication attempt failed:
            From SR8 to UFNTS8
            Naming Context: DC=lapointweb,DC=com
            The replication generated an error (1908):
            Could not find the domain controller for this domain.
            The failure occurred at 2013-10-12 09:48.45.
            The last success occurred at 2013-09-12 15:48.36.
            1487 failures have occurred since the last success.
            Kerberos Error.
            A KDC was not found to authenticate the call.
            Check that sufficient domain controllers are available.
         ......................... UFNTS8 passed test Replications
      Starting test: NCSecDesc
         ......................... UFNTS8 passed test NCSecDesc
      Starting test: NetLogons
         ......................... UFNTS8 passed test NetLogons
      Starting test: Advertising
         ......................... UFNTS8 passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... UFNTS8 passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... UFNTS8 passed test RidManager
      Starting test: MachineAccount
         ......................... UFNTS8 passed test MachineAccount
      Starting test: Services
         ......................... UFNTS8 passed test Services
      Starting test: ObjectsReplicated
         ......................... UFNTS8 passed test ObjectsReplicated
      Starting test: frssysvol
         Error: No record of File Replication System, SYSVOL started.
         The Active Directory may be prevented from starting.
         There are errors after the SYSVOL has been shared.
         The SYSVOL can prevent the AD from starting.
         ......................... UFNTS8 passed test frssysvol
      Starting test: kccevent
         ......................... UFNTS8 passed test kccevent
      Starting test: systemlog
         An Error Event occured.  EventID: 0xC00010DF
            Time Generated: 10/12/2013   09:03:50
            Event String: A duplicate name has been detected on the TCP
         An Error Event occured.  EventID: 0xC00010DF
            Time Generated: 10/12/2013   09:18:50
            Event String: A duplicate name has been detected on the TCP
         An Error Event occured.  EventID: 0xC00010DF
            Time Generated: 10/12/2013   09:33:50
            Event String: A duplicate name has been detected on the TCP
         An Error Event occured.  EventID: 0x00000C19
            Time Generated: 10/12/2013   09:33:50
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00010DF
            Time Generated: 10/12/2013   09:48:50
            Event String: A duplicate name has been detected on the TCP
         ......................... UFNTS8 failed test systemlog

   Running enterprise tests on : lapointweb.com
      Starting test: Intersite
         ......................... lapointweb.com passed test Intersite
      Starting test: FsmoCheck
         Error: The server returned by DsGetDcName() did not match DsListRoles()
 for the PDC
         ......................... lapointweb.com passed test FsmoCheck

C:\Program Files\Support Tools>
SOLUTION
Avatar of arnold
arnold
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of red_75116

ASKER

I am not sure if the /forestprep  and /domainprep was done prior to dcpromo.  I was brought in to remove the old dc.

Can those be rerun with no affect if it wasn't done prior?

When moving the roles, you get an error.

The functional forest level is 2000 because one domain is 2000 and one is 2008
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial